[SunHELP] /usr/share/man/mansps/ddos/carko occupies one processor

Bruce Pullig sunhelp at sunhelp.org
Mon Apr 23 15:37:22 CDT 2001


This process should not be there!   There should be no executables in
/usr/share/man. It sounds like you may have been cracked, and had a
distributed denial of service (ddos) program installed.   
Do a:

/usr/bin/find /usr/share/man -exec file {} ';' | grep -v text | grep -v
directory 

to fine any other executables in /usr/share/man.  If I were you I would
completely rebuild the system with better security if I were supporting
it.

Anyone, am I off base here?

-- 
* * * * * * * * * * * * * * * * * * * * *
  Bruce Pullig, CSA, CNA, MCPS
  Senior Systems Administrator
  GeoQuest DMC
  5444 Westheimer, Suite 800
  Houston, TX 77056
  (713) 350-4217 
  bpullig at houston.geoquest.slb.com
* * * * * * * * * * * * * * * * * * * * *


Wolfgang Engelien wrote:
> 
> Hi,
> 
> the /usr/share/man/mansps/ddos/carko process slows one
> of my U2's down (SOL7) and I have no idea what this
> process is good for. Any ideas?
> 
> Thanks,
> Wolfgang
> #####
> # Wolfgang Engelien
> # Tel.: +1 (212) 746 3724
> # Fax.: +1 (212) 746 5818
> # email: wolfgang at hanazono.med.cornell.edu
> #####
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp



More information about the SunHELP mailing list